Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa
File: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (raw, json)
Hash identifier: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=
Subject key identifier: FB:B8:D6:CE:A1:FB:C1:3D:67:F8:BF:17:91:F2:B5:90:46:9B:29:F0
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 01941FFAA200D172B4B152D899757EE23A6E
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208566
IP address blocks: 45.128.216.0/24 maxlen: 24
45.128.217.0/24 maxlen: 24
195.191.235.0/24 maxlen: 24
2a0e:41c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:00:d1:72:b4:b1:52:d8:99:75:7e:e2:3a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb8d6cea1fbc13d67f8bf1791f2b590469b29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:a0:71:cd:4c:c4:4d:0f:4f:d1:76:d2:b4:
39:c2:d9:a1:c6:55:9d:4b:36:19:76:60:90:53:39:
a4:b9:d0:5e:ed:9c:12:d7:79:d3:5c:89:ac:13:c3:
04:a8:a0:21:b8:83:29:d5:ab:be:5f:26:6f:53:74:
62:e3:33:d1:65:e6:3d:d5:cb:ce:53:11:98:7a:a8:
79:0c:c0:d9:a2:dc:86:b2:29:62:46:d2:4b:93:20:
08:65:28:c4:79:57:24:f7:5d:91:1c:fe:72:e0:15:
f0:23:e8:c6:56:db:8e:32:9d:54:a1:1a:3e:77:9d:
83:af:3b:82:5c:42:0c:a4:e0:ee:05:74:1c:71:43:
6c:49:aa:ee:13:14:34:f2:61:73:6e:f2:a0:77:41:
05:29:bd:63:b7:60:9b:77:fe:c8:13:28:98:fd:f2:
fa:aa:7b:39:56:e2:0a:20:57:07:15:20:2f:6d:5f:
ef:61:35:86:be:4e:b9:41:2d:5d:18:4a:fb:ca:88:
8b:ae:3f:d4:86:cc:63:d4:8f:b4:ea:cf:2f:1b:85:
9c:69:10:21:b5:ef:18:71:48:a3:2e:ba:c9:cd:4f:
3e:16:1a:73:e3:f7:fa:0e:36:32:96:64:96:0e:12:
ce:cb:3a:68:b4:5f:0b:7e:9e:99:c0:bc:d0:37:32:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:D6:CE:A1:FB:C1:3D:67:F8:BF:17:91:F2:B5:90:46:9B:29:F0
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.216.0/23
195.191.235.0/24
IPv6:
2a0e:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:79:ae:9d:cf:4c:08:05:c1:3b:73:fc:e9:f4:4d:f1:d8:2a:
e0:7d:6f:99:dc:75:11:b3:9a:0f:ef:01:9f:05:c1:5c:6e:78:
01:9a:f5:e2:67:ae:75:8f:04:13:7f:cf:24:fa:49:0b:ef:2d:
6e:a0:21:e8:47:06:9a:62:e4:52:a1:92:d7:59:2e:2c:78:d0:
e4:e3:cd:78:88:3e:b6:a9:df:a5:bf:32:16:1e:12:fe:6d:44:
b2:af:74:92:01:bb:34:0a:28:16:75:d2:ad:fd:20:1d:1a:c0:
43:ab:48:a8:f7:cb:6c:80:bf:32:cc:7c:0f:5c:b3:ff:56:f3:
8d:9e:80:50:da:21:2e:d6:39:c4:c8:68:a6:95:1d:77:1c:01:
40:31:41:cd:a4:4d:da:70:01:55:97:da:bc:21:7a:db:f0:d7:
8c:9e:82:3c:cc:b7:e8:37:c6:0b:10:d3:ea:c5:22:2b:9c:aa:
f7:79:1f:84:9b:88:5e:1c:cd:31:b5:88:59:9b:70:23:6a:e0:
b1:91:c8:06:96:b4:d3:8f:d7:93:b8:0f:ad:5a:d8:29:61:6b:
56:87:7f:75:70:3d:cc:16:7e:70:a3:e1:34:fc:ab:32:18:53:
02:ac:9e:10:e5:31:61:a9:72:8d:57:eb:e2:97:20:96:5c:ab:
2d:3e:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:14:09 2025 by rpki-client